Some useful ones are “OverSight” (gives notifications when the webcam or microphone is activated) and “BlockBlock” (prompts with an allow/deny whenever a piece of software tries to install a launchagent/launchdaemon/kext, as well as “KnockKnock” which generates a one-shot report of all kinds of startup items.